Cyber Security Forensics Analyst

ManTech; Mississippi; On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a motivated Cyber Security Forensics Analyst to join their dynamic team. In this pivotal role, you will lead complex digital forensics investigations, identifying vulnerabilities and developing new exploitation techniques. Your expertise will help analyze cyber activities to uncover malicious behaviors and patterns. This opportunity offers a chance to work with cutting-edge frameworks and collaborate with various cybersecurity professionals, making a significant impact in the fight against cyber threats. If you are passionate about cybersecurity and ready to take on challenging investigations, this role is perfect for you.

Qualifications

• 9+ years in cyber security or forensic investigations with a relevant degree.
• 8570 compliant certification in IAT Level III required.

Responsibilities

• Lead digital forensics investigations and analyze cyber activities.
• Collaborate with law enforcement and cybersecurity professionals.

Skills

Malware Analysis

Cyber Security

Incident Response

Digital Forensics

Threat Intel Frameworks

Technical Analysis

Education

Bachelor’s Degree in Computer Science

Bachelor’s Degree in Cybersecurity

Bachelor’s Degree in Information Technology

Tools

EnCase

FTK

Splunk

CrowdStrike Falcon

Security Onion

Axiom

Volatility

Suricata

Job description

ManTech seeks a motivated, career and customer-oriented Cyber Security Forensics Analyst to join our team in Stennis, MS.

In this role you will lead and conduct complex digital forensics investigations targeting systems and networks, identifying vulnerabilities, and supporting the development of new exploitation techniques. You will analyze cyber activities to identify entities of interest, determine malicious behavior, and recognize patterns and linkages.

Responsibilities include but are not limited to:

1. Apply the MITRE D3FEND framework to develop and implement defensive measures against cyber threats.
2. Utilize the MITRE ATT&CK framework and other techniques to identify, assess, and address cyber threats and vulnerabilities.
3. Collaborate with other cybersecurity professionals, law enforcement agencies, and intelligence organizations to share information and coordinate response efforts.
4. Conduct dynamic malware analysis and perform memory and dead-box forensics.
5. Investigate computer and information security incidents to determine the extent of compromise to information and automated information systems. Develop and maintain standard operating procedures (SOPs) and rules of engagement (ROE) templates.
6. Perform long-term and time-sensitive in-depth technical analysis of malicious code (malware), developing defensive countermeasures, and producing reports for dissemination.
7. Using static and dynamic methodologies for malware analysis, such as debuggers, disassemblers, and sandbox execution. Write forensics and incident response reports, investigate computer attacks, and extract data from electronic systems.

Minimum Qualifications:

1. 9+ years of progressively responsible experience in cyber security, incident response, or forensic investigations including malware analysis and a bachelor’s degree in computer science, engineering, information technology, cybersecurity, or related field of study.
2. An 8570 compliant certification in IAT Level III.
3. One of the following relevant certifications: GIAC Certified Forensic Analyst (GCFA), Certified Information Systems Security Professional (CISSP), or Certified Cyber Forensics Professional (CCFP).
4. Knowledge and experience with Threat Intel Frameworks (e.g. Cyber Kill Chain, MITRE ATT&CK, Diamond Model).
5. Demonstrated experience using EnCase, FTK, and Open-Source methods and tools to perform computer forensic investigations.
6. Experience with Splunk, CrowdStrike Falcon, Security Onion, EnCase, Axiom, FTK, Volatility, or Suricata.
7. Experience with network topologies and network security devices (e.g. Firewall, IDS/IPS, Proxy, DNS, WAF, etc).

Clearance Requirements:

1. Must have a current/active Secret clearance with the ability to obtain and maintain a TS/SCI.
2. The ability to obtain and maintain a DHS EOD suitability is required prior to starting this position.

Physical Requirements:

1. Must be able to remain in a stationary position for extended periods of time.
2. Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.
3. Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.
4. The person in this position frequently communicates with co-workers, management, and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.

ManTech International Corporation, as well as its subsidiaries proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

If you are a qualified individual with a disability and require a reasonable accommodation to apply for a position with ManTech through its online applicant system, please email us at [e-mail] and provide your name and contact information.